CVE-2018-6969 is an out-of-bounds read vulnerability in VMware Tools versions 10.x and prior to 10.3.0, specifically within the HGFS component. This flaw, with a CVSS v3 score of 7.0 (High), requires local access and enabled file sharing to exploit, potentially leading to information disclosure or privilege escalation within guest virtual machines. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the vulnerability poses a significant risk if the specific prerequisites are met.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 10.3.0CPE matchmatch criteria | cpe:2.3:a:vmware:tools:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.4 InfoSec Media, 0.1 Vendor Blog, and 0.0 Security Researcher mentions.